Detecting and defeating advanced man-in-the-middle attacks against TLS

Author

de la Hoz, Enrique ; Cochrane, Gary ; Moreira-Lemus, Jose Manuel ; Paez-Reyes, Rafael ; Marsa-Maestre, Ivan ; Alarcos, Bernardo

Author_Institution

Comput. Eng. Dept., Univ. of Alcala, Alcala de Henares, Spain

fYear

2014

fDate

3-6 June 2014

Firstpage

209

Lastpage

221

Abstract

TLS is an essential building block for virtual private networks. A critical aspect for the security of TLS dialogs is authentication and key exchange, usually performed by means of certificates. An insecure key exchange can lead to a man-in-the-middle attack (MITM). Trust in certificates is generally achieved using Public Key Infrastructures (PKIs), which employ trusted certificate authorities (CAs) to establish certificate validity chains.

Keywords

computer network security; public key cryptography; virtual private networks; CA; MITM; PKI; TLS dialogs; advanced man-in-the-middle attacks; authentication; certificate authorities; key exchange; public key infrastructures; security; virtual private networks; Browsers; Internet; Pins; Proposals; Public key; Servers; MITM attacks retaliation; OpenFlow; SDN; certificate-pinning schemes;

fLanguage

English

Publisher

ieee

Conference_Titel

Cyber Conflict (CyCon 2014), 2014 6th International Conference On

Conference_Location

Tallinn

ISSN

2325-5366

Print_ISBN

978-9949-9544-0-7

Type

conf

DOI

10.1109/CYCON.2014.6916404

Filename

6916404

Link To Document

https://search.isc.ac/dl/search/defaultta.aspx?DTC=49&DC=263563